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-- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )E3 Responsive to communication(s) filed on 25 May 2000 . 
2a)Q This action is FINAL. 2b)K This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
Disposition of Claims 

4) ^ Claim(s) 1-32 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 7-32 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
1 1 )□ The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

13) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)DAII b)D Some*c)D None of: 

1 D Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 

3.Q Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 
Attachment(s) 

1 ) K Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) Paper No(s). . 

2) £3 Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) d Notice of Informal Patent Application (PTO-152) 

3) Information Disclosure Statement(s) (PTO-1449) Paper No(s) . 6) □ Other: 
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DETAILED ACTION 



1 . This office action is in response to applicant's application serial no. 09/579,079 
filed on 5/25/2000. 



2. The information disclosure statement (IDS) submitted on 5/25/2000 has been 
considered. 



3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 



4. Claims 1-4, 9, 17-20 and 23 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Lineham et al. (U.S. Patent No. 5,495,533). 

5. In respect to claims 1,19 and 23, Lineham et al. disclose a computer method 
and system for securing access to data, comprising: 

"generating a first message at a first computer system, said first message 
comprising information corresponding to data, and transmitting said first message to a 
second computer system" (see col. 7, lines 46-53); 

"receiving said first message at said second computer system, and generating a 
key paid comprising an encoding key and a decoding key for encoding and decoding of 
said data" (see col. 7, lines 46-64); 



Information Disclosure Statement 



Claim Rejections - 35 USC § 102 



States. 
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"generating a second message comprising said encode key, and transmitting 
said second message to said first computer system" (see col. 7, lines 50-53); and 

"receiving said second message at said first computer system, wherein said 
encode key in said second message is used to encode said data" (see col. 7, lines 50- 
53). 

6. In respect to claims 16 and 8, Linehan et al. disclose a method in a network 
computer system providing access to encoded data, comprising: 

"generating a first message at a first computer system, said first message 
comprising information corresponding to said encoded data, and transmitting said first 
message to a second computer system" (see col. 7, lines 46-64); 

"receiving said first message at said second computer and using said information 
in said first message to retrieve a record corresponding to said encode data, said record 
comprising a decode key for decoding said encode data" (see col. 7, lines 54-64); 

"generating a second message comprising said decode key, and transmitting 
said second message to said first computer system" (see col. 7, lines 60-64); 

"receiving said second message at said first computer system, wherein said 
decode key in said second message are utilized to decode said encode data" (see col. 

7, lines 63-64). 

7. In respect to claim 2, Linehan et al. disclose the method of claim 1 and further 
disclose said method comprising: 

"storing said key pair and said information in said first message in a database 
record" (see col. 12, lines 62-67). 
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8. In respect to claims 3, 17 and 20, Linehan et al. disclose the method of claim 1 
and further discloses said method comprising: 

"encoding said data using said encode key, and storing said encoded data" (see 
col. 12, lines 53-64). 

9. In respect to claims 4 and 18, Linehan et al. disclose the method of claim 1 
wherein said "first computer system comprises at least one client computer system and 
said second computer system comprises at least one server computer system" (see col. 
6, lines 29-38). 

10. In respect to claims 9 and 21 , Linehan et al disclose the method of claim 8 and 
19 further comprising: 

"accessing said encoded data and decoding said encoded data using said 
decode key" (see col. 7, lines 63-64). 

Claim Rejections - 35 USC § 103 

1 1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

12. Claim 24 is rejected under 35 U.S.C. 103(a) as being unpatentable over Linehan 
et al. (U.S. Patent No. 5,495,533). 
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Linehan et al. disclose the method of claim 23. Linehan et al. do not explicitly 
disclose "said secure save command is performed by a component of a graphical user 
interface presenting command buttons on a user tool bar on said first computer system". 

However, Official Notice is taken that using saving file via a graphical user 
interface (GUI) is old and well known (i.e. Internet browser). It would have been 
obvious to one of ordinary skill in the art at the time the invention was made to save file 
through GUI for the ease of use. 

13. Claim 5-7, 10, 12-14, 25-26, 29-32 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Linehane et al. (U.S. Patent No. 5,495,533) in view of Yatsukawa 
(U.S. Patent No. 6,148,404). 

14. In respect to claims 28 and 25-26, Linehan discloses a method of providing 
secure real time storage and retrieval of data comprising: 

"maintaining a secure link between a first computer system and a second 
computer system" (see Fig. 7, item 73, col. 7, lines 5-14); 

"maintaining said secure link between said first computer system and said 
second computer system while performing authentication functions on said second 
computer system, wherein said authentication comprises obtaining an identity for said 
first computer system" (see col. 7, lines 30-36, Personal Key Client-first computer, 
Personal key Server-second computer); 

"obtaining a secure save command from a user (see col. 7, lines 30-35) 
comprising the steps of: 
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generating a first message at said first computer system, said first message 
comprising information corresponding to said file data and said identity, and transmitting 
said first message to said second computer system" (see col. 7, lines 39-54); 

"receiving said first message at said second computer system and generating en 
encode key for encoding said file data and generating a decode key for decoding said 
file data" (see col. 7, lines 46-64); 

"generating a second message comprising said encode key, and transmitting 
said second message to said first computer system" (see col. 7, lines 45-53); 

"receiving said second message at said first computer system, wherein said 
encode key in said second message is utilized to encode said file data" (see col. 7, lines 
45-53), 

"accessing encoded file data by generating a third message at said first computer 
system, said third message comprising information corresponding to said encode file 
data, and transmitting said third message to said second computer system" (see col. 7, 
lines 54-64); 

"receiving said third message at said second computer system, and using said 
information in said third message to retrieve a record corresponding to said encode 
data, and said record comprising a decode key for decoding said encoded data" (see 
col. 7, lines 54-64); 

"generating a fourth message comprising said decode key and said encoded file 
data; and transmitting said fourth message to said first computer system" (see col. 7, 
lines 54-64); 



Application/Control Number: 09/579,079 Page 7 

Art Unit: 2134 

"receiving said fourth message at said first computer system, and using said 
decode key in said fourth message to decode said encoded file data" (see col. 7, lines 
54-64). 

Linehan et al. do not explicitly discloses second computer performs registration 
function. However, Yatsukawa teaches an initial registration from user before log-in to 
server site (see col. 15, line 65-col. 16, line 3). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to implement an initial 
registration of user as taught by Yatsukawa to create a user profile to identify user's 
accessing the data file. 

Furthermore, Linehan et al. do not explicitly disclose save command from the 
user is embedded into a graphical user interface of said first computer system and said 
user use secure save command of graphical user interface initiates a process. 
However, Official Notice is taken that using saving file command via a graphical user 
interface (GUI) is old and well known (i.e. Internet browser). It would have been 
obvious to one of ordinary skill in the art at the time the invention was made to save file 
through GUI for the ease of use. 

15. In respect to claims 5 and 29, Linehan et al. disclose the method accessing 
secure data wherein said generating said first message further comprises: 

"placing information identifying said data and user information associated with a 
user of said data at said first computer system in said first message" (see col. 7, lines 
45-53). Linehan et al. do not discloses generating a one way hash function associated 
with said data; and placing said one way hash function at said first computer in said first 
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message. However, Yatsukawa discloses using hash processing to compress a 
message (see Fig. 4 and col. 14, lines 13-14). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to implement the teaching of 
Yatsukawa with Linehan et al. to compress the data of said first message for the benefit 
of making the data smaller before it is being transmitted over the network. 

16. In respect to claims 6, 10 and 30, Linehan et al. and Yatsukawa disclose the 
method of accessing secure data and further disclose said method comprising: 

"obtaining said first message at said second computer" (see col. 7, lines 46-48); 

"storing said user information, said information identifying said data" (see col. 7, 
lines 54-60). Linehan et al. do not discloses "generating a time stamp and a digital 
signature representing; and digital time stamp, and said one way hash function in said 
first message". However, Yatsukawa discloses a time stamp and digital signature 
before a message is sent (see Fig. 5, B1 and B4 and col. 14, lines 15-16), performing a 
hash processing on a message (see Fig. 4 and col. 14, lines 13-14). It would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
incorporate the teaching of Yasukawa to provide time stamp with digital signature and 
compressing data with hash function into outgoing message for authentication and data 
verification purposes. 

17. In respect to claims 7 and 31 , Linehan et al. and Yatsukawa disclose the method 
of claim 6 and 30. Yatsukaw further discloses wherein said second message further 
comprises: 
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"said time stamp, said information identifying said data and said digital signature 
in said second message (see Fig. 5, B2 and B4, col. 5, lines 35-39). 

In respect to claim 1 1 , Linehan et al. disclose the method of claim 10 further 
comprising: 

"receiving said third message at said second computer system; accessing said 
corresponding record" (see col. 7, lines 54-64). 

Linehan et al. do not discloses "verifying said digital signature therein with said 
received digital. However, Yatsukawa discloses received incoming message with digital 
signature and verifying said digital signature (see Fig. 5, Server B, B4: inspect Sa). It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to incorporate the teaching of Yasukawa to provide receiving and verifying of 
digital signature for the purpose of authenticating incoming message. 

18. In respect to claim 12, Linehan et al. and Yatsukawa disclose the method of 
claim 11 . Linehan et al. further disclose said method comprising: 

"upon proper verification, generating a fourth message comprising information 
identifying the encode data file and said decode key, and transmitting said fourth 
message to said first computer" (see col. 7, lines 54-64). 

19. In respect to claim 13, Linehan et al. and Yatsukawa disclose the method of 
claim 12. Linehan et al. further disclose said method comprising: 

"receiving said fourth message at the first computer; accessing said encode data; 
and using said decode key in said fourth message to decode said encode data" (see 
col. 7, lines 54-64). 
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20. In respect to claim 14, Linehan et al. and Yatsukawa disclose the method of 
claim 1 1 . Yatsukawa further disclose said method comprising: 

"upon successful verification, generating a data retrieval time stamp and storing 
said data retrieval time stamp" (see Fig. 5, Inspect B2 and col. 5, lines 35-39). 

21. In respect to claim 15, Linehan et al. and Yatsukawa disclose the method of 
claim 14. Yatsukawa further discloses said method comprising: 

"upon unsuccessful verification, generating an attempted data retrieval time 
stamp and storing said attempted data retrieval time stamp" (see Fig. 5, Inspect B2 and 
col. 5, lines 35-39). 

22. In respect to claims 27, Linehan et al. and Yatsukawa discloses a method 25 and 
further disclose: 

"secure link utilizes cryptographic protocols" (see col. 3, lines 10-13). 

23. In respect to claim 32, Linehan et al. and Yatsukawa discloses the method of 
claim 28 and further discloses "said encoded file data may be stored at a third computer 
system" (see Fig. 16, lines 10-15). 

Conclusion 

24. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

-Nissl et al. disclose a method and device that validates time of an internal 
source using an external source. 

-Harverty discloses an user authentication using a virtual private key. 
-Kelly discloses dual key reflexive encryption security system. 
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25. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tongoc Tran whose telephone number is (703) 305- 
7690. The examiner can normally be reached on 8:30-5:00 M-F. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory A. Morse can be reached on (703) 308-4789. The fax phone 
number for the organization where this application or proceeding is assigned is (703) 
872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703)305- 



9600. 



Examiner Tongoc Tran 
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